---
title: UTunnel VPN
description: A robust and user-friendly ZTNA-based Business VPN gateway that seamlessly supports multiple VPN protocols.
product: Marketplace
url: https://docs.digitalocean.com/products/marketplace/catalog/utunnel-vpn/
last_updated: "2025-03-19"
---

> **For AI agents:** The documentation index is at [https://docs.digitalocean.com/llms.txt](https://docs.digitalocean.com/llms.txt). Markdown versions of pages use the same URL with `index.html.md` in place of the HTML page (for example, append `index.html.md` to the directory path instead of opening the HTML document).

# UTunnel VPN

Generated on 19 Mar 2025 from [the UTunnel VPN catalog page](https://marketplace.digitalocean.com/apps/utunnel-vpn)

[**UTunnel Access Gateway**](https://www.utunnel.io/solutions/business-vpn-solution) allows you to run **your own ZTNA-based VPN gateway** on your DigitalOcean droplet. The Droplet can be of any size based on your requirements. With UTunnel, you can easily [**set up a DigitalOcean VPN server**](https://www.utunnel.io/integrations/digitalocean-vpn-server) that supports roaming VPN users, site-to-site tunnelling, client device access control, external DNS integration, split tunnelling, and manual VPN connections, all while enforcing zero-trust security principles.

UTunnel also includes context-aware access policies, identity-based authentication, SSO integration, and multi-factor authentication (MFA), ensuring least-privilege access and secure resource segmentation. For more details, you can check out the [**UTunnel Features**](https://www.utunnel.io/utunnel-features-and-benefits) page.

UTunnel provides client apps for Windows, macOS, Linux, Android, and iOS, so that you can connect seamlessly to your VPN gateway from all the devices you own. It’s **well suited for small-medium businesses** and offers monthly billing, no long-term commitments. It also offers a **14-day risk-free trial** so that you can test the VPN service before moving on to a paid plan. Your UTunnel access gateway subscription cost is based on the number of users and the chosen plan. You can check [**UTunnel Access Gateway Pricing**](https://www.utunnel.io/vpn-server-pricing-plans) page for more details on the plans offered.

## Software Included

| Package | Version | License |
|---|---|---|
| [UTunnel Access Gateway](https://www.utunnel.io/solutions/business-vpn-solution) | 10114 | Subscription Based |

## Creating an App using the Control Panel

Click the **Deploy to DigitalOcean** button to create a Droplet based on this 1-Click App. If you aren’t logged in, this link will prompt you to log in with your DigitalOcean account.

[![Deploy to DO](https://www.deploytodo.com/do-btn-blue.svg)](https://cloud.digitalocean.com/droplets/new?image=utnadmins-utunnelvpn)

## Creating an App using the API

In addition to creating a Droplet from the UTunnel VPN 1-Click App using the control panel, you can also use the [DigitalOcean API](https://docs.digitalocean.com/reference/api). As an example, to create a 4GB UTunnel VPN Droplet in the SFO2 region, you can use the following `curl` command. You need to either save your [API access token](https://docs.digitalocean.com/reference/api/create-personal-access-token/index.html.md) to an environment variable or substitute it in the command below.

```shell
curl -X POST -H 'Content-Type: application/json' \
         -H 'Authorization: Bearer '$TOKEN'' -d \
        '{"name":"choose_a_name","region":"sfo2","size":"s-2vcpu-4gb","image":"utnadmins-utunnelvpn"}' \
        "https://api.digitalocean.com/v2/droplets"
```

## Getting Started After Deploying UTunnel VPN

- Once the deployment of your UTunnel VPN droplet is complete, note down **its IP address.**
- [**Signup with UTunnel**](https://dashboard.utunnel.io/user/signup/) and create a server with your newly created droplet’s public IP address. Select the On-Premise option when you create the server and **it comes with a 14-day free trial period.** You will be provided with a **server registration token.**
- Connect to your UTunnel VPN Droplet via SSH using the following command:

```
ssh root@your_droplet_public_ipv4
```

- After successful login, execute the following commands, after replacing the REG_TOKEN with the **registration token** obtained in step 2:

```
sudo utnservice update
sudo utnservice register REG_TOKEN
sudo utnservice start
```

- Make sure that inbound connections to the following ports are allowed to accept VPN connections.

TCP 443, UDP 443, UDP 53 (Ports used for **OpenVPN** connections)

UDP 4500, UDP 500 (Ports used for **IPSEC** connections)

- Your UTunnel VPN server would be ready to accept VPN connections now. Invite users into your server and start using the VPN.

There is a detailed tutorial to help you **[install UTunnel VPN 1-Click App from DigitalOcean Marketplace](https://www.utunnel.io/help/how-to-set-up-a-digitalocean-vpn-server).** If you require any further assistance, you can visit the [**UTunnel VPN help portal**](https://www.utunnel.io/help/) or send an email to [**support@utunnel.io**](mailto:support@utunnel.io)